Security Testing

Ravi Kumar Chada

Contact No: +91-91-541-***-**

Email Id: ***********@*****.***

Synopsis:

Certified Ethical Hacker with 2+ Years of Experience in Security Testing

Experience in Web Application Security Testing followed by OWASP top 10 Standards

Experienced in Network Security Testing by Using open source tools

Experienced in Vulnerability Assessment and Penetration testing

Experienced in Application Security testing in early stages of SDLC to reduce the vulnerability impact on Application Functionality

Monitor Computer Networks for Security threats or unauthorized users

Analyze security risks and develop response procedure additional duties testing software deployment tools, firewalls and IDS and IPS

Research, Evaluate, recommend and Implement other security devices as well

Installing computer security software’s, conduct regular security audit, preparing security status report, educating users on computer security, creating security documentation for users

Assisting in disaster recovery and gathering evidence regarding cyber crimes

Interact with Developers and QA team members during extended hours due to time differences in team locations, to ensure product functionality and quality standards are met.

Has Strong analytical, problem solving and communication skills, with the ability to interact with individuals at all levels for the smooth work flow

Flexible and versatile to adapt to any new environment and work on any project

Ability to quickly learn new technologies and applying its full range of capabilities

Certifications

CEH

Android Penetration testing

iOS Penetration Testing

Web Application Penetration Testing

Security Testing Tools

IBM App Scan, Fortify, Acunetix, Checkmarx, Burp suite, Web Scarab, ZAP, Nessus, Nmap, Wire shark, Backtrack, Kali Linux, Metasploit, GAiA

Scripting languages - Java Script, Python Script

Operating Systems - Linux, windows

Educational Qualification – Graduation from Kakatiya University (B.Com)

Experience

Organization : Cargo Soft Pvt. LTD

Job Position : IT Security Analyst

Job Tenure : 2012 Dec to Present

Job Responsibilities

Source Code review by using automated tools like Checkmarx, IBM app Scan, Fortify, Web Inspect.

Conducting Risk Assessment and Threat Modeling to find flaws in a Application.

Interacting with Developers Team for better understanding of Secure Application Development.

Analyze test findings and of security vulnerabilities found and collaborate with engineering and development teams to provide mitigation steps to reduce the vulnerabilities.

Perform Web Services testing by using manual test and automated tools

Performing Web application authentication Manipulation Using SQL Injection tools like Haviji

Experience in using Fortify or other Static Analysis Tools (like Checkmarx) for Static Analysis and False Positive Elimination.

Performing social engineering attacks using Back track and Kali Linux

Performing Black Box testing with anonymous identity

Performing XSS and SQL attacks on a web application and suggesting solutions for vulnerabilities

Performing sophisticated penetration examinations for the purpose of ascertaining the technical weaknesses existing the computer systems

Finding out effective ways of manipulating the vulnerable domains of the systems

Maintaining high level of security of the information that is crucial for the business growth of the organization

Formulating hard-hitting measures with a view to secure the domains that can portray threat to the significant information owned by the organization

Identifying efficient measures of sustaining network security at a constant rate

Becoming familiar with the business functions and infrastructure of the organization

Carefully assessing the software environments and examining the level of risk that they can pose to the network systems of the organization

Demonstrating applicable information pertinent to the security before the regional directors and management group of the organization

Performing latest assessments with a view to come up with possible solutions for eradicating network related vulnerabilities

***

Contact this candidate